This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer (raw, json) Hash identifier: OQaPvAgqTOG0ezyQc2aULwx/STXLD9id6iLx9hegK2c= Subject key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE0C48AD64A24529E65BD5AE7B15A56E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 13:35:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207728 IP: 31.10.5.0/24 IP: 31.210.170.0 -- 31.210.173.255 IP: 46.28.234.0/24 IP: 62.171.228.0/22 IP: 62.204.42.0/24 IP: 85.136.112.0/22 IP: 85.136.180.0/22 IP: 87.236.177.0/24 IP: 93.88.74.0/23 IP: 93.188.155.0/24 IP: 103.65.230.0/23 IP: 104.192.42.0/24 IP: 138.226.220.0/22 IP: 148.227.170.0/24 IP: 185.162.8.0/22 IP: 185.204.52.0/22 IP: 194.146.127.0/24 IP: 2a12:9cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:c4:8a:d6:4a:24:52:9e:65:bd:5a:e7:b1:5a:56:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 13:35:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:37:64:72:6a:5c:34:48:1e:9e:a1:7f:76: a6:b9:98:0b:d4:15:c4:2a:45:c0:0e:b7:20:c2:7c: 9a:22:3a:31:42:c2:ef:8a:ac:c9:7d:45:ce:a7:b0: f9:33:b5:1e:05:ee:65:cb:d8:3c:3a:3d:c5:8a:58: be:c5:02:cd:5b:1e:79:16:5e:cc:ee:69:da:9a:f1: 00:66:87:4a:fb:c6:ec:e3:14:a4:8a:b5:41:a9:a0: f1:aa:e2:90:eb:ca:b7:d3:d3:ab:d7:74:08:80:6d: 30:e5:60:94:11:dd:dc:61:ba:66:5f:58:8c:40:d5: b5:12:cc:fe:31:58:ce:5d:56:cf:b4:b5:ab:b7:6f: f4:19:7f:ff:1c:01:31:5c:23:7e:a4:c6:04:b6:9d: b0:7e:4b:e7:17:f9:50:05:b3:1f:12:50:84:c8:f6: 04:dd:c9:f2:26:72:33:e8:38:b0:d2:eb:cd:86:f2: d8:98:ee:86:20:52:ac:82:27:d1:1c:1b:ca:65:24: 49:1f:8f:cc:e5:55:a6:e8:fa:8f:49:48:d5:ee:2d: 15:f5:c2:97:ba:44:97:46:e2:e4:1b:f8:61:c2:93: 92:f7:ef:d6:09:01:f8:dc:4d:a7:3a:94:7e:ea:d6: 37:3e:37:e2:52:60:0e:96:c2:d1:a8:b6:24:42:3e: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.5.0/24 31.210.170.0-31.210.173.255 46.28.234.0/24 62.171.228.0/22 62.204.42.0/24 85.136.112.0/22 85.136.180.0/22 87.236.177.0/24 93.88.74.0/23 93.188.155.0/24 103.65.230.0/23 104.192.42.0/24 138.226.220.0/22 148.227.170.0/24 185.162.8.0/22 185.204.52.0/22 194.146.127.0/24 IPv6: 2a12:9cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207728 Signature Algorithm: sha256WithRSAEncryption 83:31:9c:89:2e:ae:0e:57:a2:b1:31:e1:1e:3b:f4:d7:e5:75: 6d:30:e1:f2:b0:f3:94:6d:d8:70:b9:de:32:0d:59:dc:28:4b: 36:0c:96:97:58:52:2f:e8:72:35:a0:fe:7b:8d:1c:1c:0e:7b: bb:78:e6:c6:c5:1a:31:e4:44:31:66:8d:11:ce:01:7f:2f:bd: d9:80:0d:a0:cb:4e:6a:7e:7a:89:aa:48:f8:b2:52:ac:a1:8a: 8e:96:6b:ab:8e:b8:8a:e6:f9:6d:67:f0:87:f4:15:15:58:6a: 44:bb:83:0a:ff:c8:b3:f6:90:1b:75:8c:0b:20:1c:b7:f4:91: 93:8f:0c:d6:2d:ef:74:c1:c4:d8:fa:b0:74:e4:79:eb:d5:7c: ad:60:de:bb:96:35:bd:8c:a0:a3:9d:2c:63:13:b3:92:b9:1d: c5:c4:17:79:04:46:14:99:09:57:90:8e:fe:ea:e2:50:1b:5a: e7:89:1a:cb:f1:02:f9:a8:ec:ff:a3:56:64:79:63:51:24:4f: 12:be:3e:38:34:da:8c:50:61:fd:d3:a9:d1:44:32:56:4f:f6: b3:76:77:1c:4e:c6:96:bd:16:0f:3f:0e:10:58:98:a8:1c:26: 9f:7d:af:e5:11:19:88:5c:61:b2:2f:93:18:41:d6:b6:7c:9f: 00:71:10:76 -----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISAZvgxIrWSiRSnmW9WuexWlbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTMzNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDlkMWY2N2E0MWNhMmU0MDUwMTdjYmU0OGJhZmZmMTczM2UzODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wE3ZHJqXDRIHp6hf3amuZgL1BXE KkXADrcgwnyaIjoxQsLviqzJfUXOp7D5M7UeBe5ly9g8Oj3Fili+xQLNWx55Fl7M 7mnamvEAZodK+8bs4xSkirVBqaDxquKQ68q309Or13QIgG0w5WCUEd3cYbpmX1iM QNW1Esz+MVjOXVbPtLWrt2/0GX//HAExXCN+pMYEtp2wfkvnF/lQBbMfElCEyPYE 3cnyJnIz6Diw0uvNhvLYmO6GIFKsgifRHBvKZSRJH4/M5VWm6PqPSUjV7i0V9cKX ukSXRuLkG/hhwpOS9+/WCQH43E2nOpR+6tY3PjfiUmAOlsLRqLYkQj7T0wIDAQAB o4IDGjCCAxYwHQYDVR0OBBYEFBSdH2ekHKLkBQF8vki6//FzPjhpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2I1MDkw YS1lYzU4LTQ2ZGItOWRkOS01NDg1NjgyYTA1ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvYjUwOTBh LWVjNTgtNDZkYi05ZGQ5LTU0ODU2ODJhMDVmNS8xL0ZKMGZaNlFjb3VRRkFYeS1T THJfOFhNLU9Hay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGYBggrBgEF BQcBBwEB/wSBiDCBhTB0BAIAATBuAwQAHwoFMAwDBAEf0qoDBAEf0qwDBAAuHOoD BAI+q+QDBAA+zCoDBAJViHADBAJViLQDBABX7LEDBAFdWEoDBABdvJsDBAFnQeYD BABowCoDBAKK4twDBACU46oDBAK5oggDBAK5zDQDBADCkn8wDQQCAAIwBwMFAyoS nMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAytwMA0GCSqGSIb3DQEBCwUAA4IB AQCDMZyJLq4OV6KxMeEeO/TX5XVtMOHysPOUbdhwud4yDVncKEs2DJaXWFIv6HI1 oP57jRwcDnu7eObGxRox5EQxZo0RzgF/L73ZgA2gy05qfnqJqkj4slKsoYqOlmur jriK5vltZ/CH9BUVWGpEu4MK/8iz9pAbdYwLIBy39JGTjwzWLe90wcTY+rB05Hnr 1XytYN67ljW9jKCjnSxjE7OSuR3FxBd5BEYUmQlXkI7+6uJQG1rniRrL8QL5qOz/ o1ZkeWNRJE8Svj44NNqMUGH906nRRDJWT/azdnccTsaWvRYPPw4QWJioHCaffa/l ERmIXGGyL5MYQda2fJ8AcRB2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:17 2026 by rpki-client